bind9/doc/notes/notes-current.rst
Evan Hunt 4aaa4f7dca deprecate resolver-retry-interval and resolver-nonbackoff-tries
these options control default timing of retries in the resolver
for experimental purposes; they are not known to useful in production
environments.  they will be removed in the future; for now, we
only log a warning if they are used.
2023-12-06 11:51:22 -08:00

61 lines
1.6 KiB
ReStructuredText

.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
..
.. SPDX-License-Identifier: MPL-2.0
..
.. This Source Code Form is subject to the terms of the Mozilla Public
.. License, v. 2.0. If a copy of the MPL was not distributed with this
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
..
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.
Notes for BIND 9.19.19
----------------------
Security Fixes
~~~~~~~~~~~~~~
- None.
New Features
~~~~~~~~~~~~
- Initial support for accepting the PROXYv2 protocol in all currently
implemented DNS transports in :iscman:`named` and complementary
support for sending it in :iscman:`dig` are included into this
release. Please consult the related documentation for additional
details.
:gl:`#4388`
Removed Features
~~~~~~~~~~~~~~~~
- None.
- The support for AES algorithm for DNS cookies has been removed.
:gl:`#4421`
- The ``resolver-nonbackoff-tries`` and ``resolver-retry-interval`` options
are now deprecated. A warning will be logged if they are used. :gl:`#4405`
Feature Changes
~~~~~~~~~~~~~~~
- The maximum number of allowed NSEC3 iterations for validation has been
lowered from 150 to 50. DNSSEC responses containing NSEC3 records with
iteration counts greater than 50 are now treated as insecure. :gl:`#4363`
- The number of NSEC3 iterations that can be configured for a zone must be 0.
:gl:`#4363`
Bug Fixes
~~~~~~~~~
- None.
Known Issues
~~~~~~~~~~~~
- There are no new known issues with this release. See :ref:`above
<relnotes_known_issues>` for a list of all known issues affecting this
BIND 9 branch.